77b6b730ab2f303d1ea80299863027531541b1c6ee52c3f0318da8d4cc506f82

General

Target
Discord-Server-Cloner-TR.zip
Size 6KB
Sample260711-11krtacz4z
SHA256 77b6b730ab2f303d1ea80299863027531541b1c6ee52c3f0318da8d4cc506f82
MD5 518e989a99ec5bf5bd697d3aaa099f2c
SHA1 306070ce1a4bad0472fadbea4944df70911826ad
SHA512 254dc86ba875a4ba6275715e8f8fc3a0eafb42db56410e58224c22f86f30babd2767a11ed2c52aecaba10c658a97297d956b39a496fa946e7e0012bd068dd494
SSDEEP 96:tBFz36Qw9JVyO8sPYr3n9CshEQAT5ifr9lEque9ZRjq5lMsinRveUjLp+gpG:tBkQwEXewXUyAAf7Ey9jjq5lSeSLpG
TLSH
T168D16EB7C646CA6DCE9467BC0659D2474E517D04793E100B7EE83B8DA8CE0921E4BF80
MD5 SHA1 SHA512 SSDEEP TLSH

Score

8^/10

Malware Config

Targets

- Target
  Discord-Server-Cloner-TR/__pycache__/serverclone.cpython-39.pyc
- Size 6KB
- SHA256 fdf224c9e260b2d0580463684ec6309af67a4d7267bbaaafad491cf2a9cb8be5
- MD5 2eeb30da11aa02eb830cc9c709ee16c0
- SHA1 1b8efc077fbbe4118988c521c56ef1d37fa21312
- SHA512 6c5e59af06b4e426676935cd525b84f8d834446b57a2f377e9f76203f975427458d430c1959a1f893673b4f9cc082e48b38b802d0a59abf625b39a498e417157
- SSDEEP 192:AXYktqDpqJxrqpw6X8bwaFcqYWlqcb3Wgl84AiEoVoVmJoKHZQOaqqWNqC/qqp:cY0qDpqJxrqq6X7qLlqiZXwfbK6HqqWx
- TLSH
  T1B3D164EB760C970FFDA3F2BA60B4420A59A9331192424CB024BCE2979DA71D35D3E5C8
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

8^/10

discovery adware persistence ransomware spyware
- Boot or Logon Autostart Execution: Active Setup
  Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
  persistence
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral1 behavioral2
- Target
  Discord-Server-Cloner-TR/main.py
- Size 4KB
- SHA256 fb8926105217e61f8926ae4f735b0f5123394833f091ff7f2fb9291a8e63ef71
- MD5 f01a0677e14dc0ad168f79539baf858f
- SHA1 64f3667cdb725b05e541dea33844d0950dfcf000
- SHA512 f4c598c0c273a5af8051ab8e320545104a3aaa001c32377e8f171157c1e0ac78347cf511ea26436fb7e1aa9b3ccb47eb5e7dc554ce954d9cc9a747c6913a1ce9
- SSDEEP 48:GMwLfCuMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMv:G9Lfk/hJR/BrXPX6E3mobPiIqEz65
- TLSH
  T1E4A1473A81E56B25812C1D974CF0FEACA7A019D6DE7A1490F9DC95E85F35D308F288F4
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10
behavioral3 behavioral4
- Target
  Discord-Server-Cloner-TR/serverclone.py
- Size 9KB
- SHA256 97bc4f2a0b1456b75c830d66e4d0b4dec02c8112ed1d53f98fa1e25c0002fd93
- MD5 3f3924e78aa2b42958588134c00f61b0
- SHA1 01903d8ecb0b49c76d77091f7b96261a92287c1d
- SHA512 9f026673b0b8acb703c568a270c9f1a74b516a40486539de269140e0fc29b26c0d5dd7fe48a6778ee9c9096cb033f0fac802e5a7c18a9831baa2e8a16cf99c13
- SSDEEP 192:9B5PQw7HLqGyRx1JqGKVQCr68IEqG2Q4bm53l4is:/5PQwURxGQp82Qvzg
- TLSH
  T15012AE7BDC28140353B3A04E8CB2A914F24A9367D47D2CA779ECEA28DF74122D86CDD1
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10
behavioral5 behavioral6